SAP security note 2149706, "Potential Information Disclosure in NW AS Java", is a note released on October 13, 2015. Below are the symptom and SAP recommended solution.
Description
Symptom
An attacker can discover information relating to NW AS Java by using an SLD UI. This information could be used to allow the attacker to specialize their attacks against NW AS Java and SLD.
Solution
Update your AS Java to a Support Package (SP) or release where the issue is fixed. Refer to the SP Patch Level section for details and available patches.
CVSS
Score 5.0 / 10 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Full note on SAP: SAP Support Launchpad note 2149706
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].